$ rpki-client -vvf rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/73FCCE5644F611F1A4419A59CC833773.roa File: 73FCCE5644F611F1A4419A59CC833773.roa (raw, json) Hash identifier: T+l5ubi8eUViRWLPD9MpZwEi1XgrxGpxotsSffGtm08= Subject key identifier: 3B:B5:16:5C:03:70:8A:4B:A5:0A:8B:C1:16:D0:9A:6E:7C:2B:CF:F6 Certificate issuer: /CN=A9187579/serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA Certificate serial: 07 Authority key identifier: 2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/73FCCE5644F611F1A4419A59CC833773.roa Signing time: Fri 01 May 2026 01:07:34 +0000 ROA not before: Fri 01 May 2026 01:07:34 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 133120 IP address blocks: 103.40.109.0/24 maxlen: 24 103.80.20.0/23 maxlen: 24 103.243.110.0/24 maxlen: 24 103.251.144.0/22 maxlen: 24 182.161.64.0/23 maxlen: 24 203.31.65.0/24 maxlen: 24 203.55.90.0/24 maxlen: 24 203.55.91.0/24 maxlen: 24 2407:d080::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187579, serialNumber=2FF95997575E6732B08790D757F6C1A0C5F2BBFA Validity Not Before: May 1 01:07:34 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f3fcd6-27bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:67:24:e2:10:8e:96:0c:c9:4c:61:2b:c3: 7a:94:03:3d:1c:df:07:b1:71:c0:8a:22:ea:4a:c3: 7c:1c:ec:d8:d7:9e:b7:99:ee:86:7a:a9:2b:9d:a0: 91:5d:d3:0d:33:2d:09:07:e0:de:9a:f4:e9:7a:e5: 30:14:11:0f:e3:a5:6a:e2:de:37:32:c0:ad:57:5f: 25:c8:a0:15:f6:1e:f2:66:88:4a:c0:26:17:23:6a: d7:b4:48:4a:4f:65:70:d8:54:bb:82:df:e8:66:22: 1c:45:e7:a7:53:e2:6f:69:f0:01:68:95:fb:dc:0c: f0:03:a0:25:cf:52:65:6e:01:0f:3f:f4:1e:48:f5: a5:50:74:05:c4:32:7f:79:ba:1c:73:d9:27:7c:88: 6f:91:6e:3e:08:ae:dd:09:00:24:8a:90:ce:26:eb: a7:c1:97:34:f6:d3:02:b4:4d:6b:33:f8:06:45:5e: 57:db:a2:39:44:7b:24:a1:4e:04:d1:d3:94:0a:ab: db:58:5a:fc:e5:23:3a:58:3f:d4:cd:8f:20:f3:ee: 3c:dc:8e:1e:9e:42:c5:b6:f3:01:73:35:b6:ed:96: a7:f4:52:b4:c6:7d:ce:e0:00:3c:ab:25:a1:b5:55: a2:81:31:92:18:11:b5:eb:ab:bc:cf:77:cd:fd:24: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B5:16:5C:03:70:8A:4B:A5:0A:8B:C1:16:D0:9A:6E:7C:2B:CF:F6 X509v3 Authority Key Identifier: keyid:2F:F9:59:97:57:5E:67:32:B0:87:90:D7:57:F6:C1:A0:C5:F2:BB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/L_lZl1deZzKwh5DXV_bBoMXyu_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L_lZl1deZzKwh5DXV_bBoMXyu_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187579/78850252437C11F1B36D3B24C1833773/73FCCE5644F611F1A4419A59CC833773.roa sbgp-ipAddrBlock: critical IPv4: 103.40.109.0/24 103.80.20.0/23 103.243.110.0/24 103.251.144.0/22 182.161.64.0/23 203.31.65.0/24 203.55.90.0/23 IPv6: 2407:d080::/32 Signature Algorithm: sha256WithRSAEncryption 19:35:17:44:1a:f0:eb:98:a0:77:ad:5b:7f:a5:11:2b:48:f7: 67:eb:16:27:91:11:eb:3f:ec:f9:1f:ca:fc:69:98:c1:96:e5: 30:80:60:85:81:ff:41:55:f5:b4:b4:d5:ee:6e:ba:6a:70:bb: 79:78:06:50:2a:6e:d9:67:14:7b:8f:8f:88:d9:24:31:96:61: 60:af:c5:e1:ad:33:64:77:56:95:b2:e5:d6:66:7b:1a:d3:3a: df:74:22:3b:9a:aa:17:be:86:a2:b0:c0:50:cf:14:a0:96:33: cb:dd:a2:57:cd:05:76:eb:94:d0:29:e4:4a:ed:85:55:ce:f8: 5b:89:4c:da:12:57:59:cf:d9:33:fb:35:90:59:8f:72:7b:8e: 38:ee:fb:62:d4:92:8d:63:ef:69:e5:fc:cb:3d:2e:9f:63:d6: 45:0b:3a:b2:1a:bc:11:93:a5:c8:96:b7:52:5a:7b:f0:59:c0: 28:7f:8d:36:4d:35:93:71:b6:71:13:5e:64:6a:b5:40:cc:12: 43:94:c1:82:35:aa:c1:3d:f2:93:6f:d3:b6:bc:a5:f6:7c:51: 51:65:49:df:fe:48:61:76:e8:e4:bc:e5:ad:16:84:f5:20:8f: 0d:19:7c:9c:3a:44:d2:6e:bd:89:19:7e:12:07:31:62:de:22: 97:70:1d:ef -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzU3OTExMC8GA1UEBRMoMkZGOTU5OTc1NzVFNjczMkIwODc5MEQ3NTdGNkMxQTBD NUYyQkJGQTAeFw0yNjA1MDEwMTA3MzRaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZjNmY2Q2LTI3YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCir2ck4hCOlgzJTGErw3qUAz0c3wexccCKIupKw3wc7NjXnreZ7oZ6qSudoJFd 0w0zLQkH4N6a9Ol65TAUEQ/jpWri3jcywK1XXyXIoBX2HvJmiErAJhcjate0SEpP ZXDYVLuC3+hmIhxF56dT4m9p8AFolfvcDPADoCXPUmVuAQ8/9B5I9aVQdAXEMn95 uhxz2Sd8iG+Rbj4Irt0JACSKkM4m66fBlzT20wK0TWsz+AZFXlfbojlEeyShTgTR 05QKq9tYWvzlIzpYP9TNjyDz7jzcjh6eQsW28wFzNbbtlqf0UrTGfc7gADyrJaG1 VaKBMZIYEbXrq7zPd839JEiVAgMBAAGjggKTMIICjzAdBgNVHQ4EFgQUO7UWXANw ikulCovBFtCabnwrz/YwHwYDVR0jBBgwFoAUL/lZl1deZzKwh5DXV/bBoMXyu/ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3NTc5Lzc4ODUwMjUyNDM3 QzExRjFCMzZEM0IyNEMxODMzNzczL0xfbFpsMWRlWnpLd2g1RFhWX2JCb01YeXVf by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTF9sWmwxZGVaekt3aDVEWFZfYkJvTVh5dV9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU3OS83ODg1MDI1MjQzN0MxMUYxQjM2RDNCMjRDMTgzMzc3My83M0ZDQ0U1NjQ0 RjYxMUYxQTQ0MTlBNTlDQzgzMzc3My5yb2EwUgYIKwYBBQUHAQcBAf8EQzBBMDAE AgABMCoDBABnKG0DBAFnUBQDBABn824DBAJn+5ADBAG2oUADBADLH0EDBAHLN1ow DQQCAAIwBwMFACQH0IAwDQYJKoZIhvcNAQELBQADggEBABk1F0Qa8OuYoHetW3+l EStI92frFieREes/7PkfyvxpmMGW5TCAYIWB/0FV9bS01e5uumpwu3l4BlAqbtln FHuPj4jZJDGWYWCvxeGtM2R3VpWy5dZmexrTOt90Ijuaqhe+hqKwwFDPFKCWM8vd olfNBXbrlNAp5ErthVXO+FuJTNoSV1nP2TP7NZBZj3J7jjju+2LUko1j72nl/Ms9 Lp9j1kULOrIavBGTpciWt1Jae/BZwCh/jTZNNZNxtnETXmRqtUDMEkOUwYI1qsE9 8pNv07a8pfZ8UVFlSd/+SGF26OS85a0WhPUgjw0ZfJw6RNJuvYkZfhIHMWLeIpdw He8= -----END CERTIFICATE-----Generated at Wed May 13 09:11:58 2026 by rpki-client